Privacy policy

1. Data Controller

I, Vanessa Lindley, am the Data Controller for Vanessa Lindley Psychotherapy. I am committed to protecting your privacy and handling your personal data in accordance with UK GDPR and the BACP and UKCP Ethical Frameworks.

2. Information I Collect

To provide effective psychotherapy, I collect:

• Personal Data: Name and contact details.

• Special Category Data: Brief clinical notes regarding your mental and physical health, family history, and lifestyle.

3. Why I Collect It (Lawful Basis)

I process your data to fulfil our contract for therapy and under the basis of "Provision of Health or Social Care." This ensures I can provide safe, professional, and ethical treatment.

4. Confidentiality & Sharing

Your information is strictly confidential. I will only share your data without your consent if:

• I am required to do so by law.

• There is a serious risk of harm to yourself or others.

• I am discussing my work with my professional supervisor (where your identity remains protected).

5. Data Storage & Security

I use secure, encrypted digital systems and keep your records for 3 months following the end of our work together, as required by insurance and professional guidelines. After this period, data is securely destroyed.

6. Your Rights

Under UK GDPR, you have the right to access your data, request corrections, or ask for your data to be deleted (subject to certain legal exceptions).

7. Contact & ICO

If you have questions about your data, please contact me at vanessa@vanessalindleypsychotherapy.com. I am registered with the Information Commissioner’s Office (ICO) under registration number: [Your ICO Number].